Field notes from the underground and the SOC

Subscribe via RSS.

• 2026-10-26 threat-intelopinion

  Feeds Are Not a Strategy: Why Threat Intel Reports Deserve a Seat at the Table

  IOC feeds and TTP mappings are hygiene. The reasoning behind them — who, why, and so what — only reaches you in a report someone actually sat down and wrote. How to build a reporting habit that does not drown you in PDFs.

• 2026-10-25 announce

  Hello from the underground

  First post. Why NixieZero exists, what to expect from this blog, and why the AI-accelerated threat landscape makes reaction time the whole game.